Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 491:

  How does Cisco Workload Optimization Manager help mitigate application performance issues?

  A. It deploys an AWS Lambda system
  B. It automates resource resizing
  C. It optimizes a flow path
  D. It sets up a workload forensic score
  B. It automates resource resizing

  ---

  Explanation

  https://www.cisco.com/c/dam/en/us/solutions/collateral/data-center- virtualization/one-enterprisesuite/solution-overview-c22-739078.pdf

• Question 492:

  Which Cisco security solution integrates with cloud applications like Dropbox and Office 365 while protecting data from being exfiltrated?

  A. Cisco Tajos
  B. Cisco Steaithwatch Cloud
  C. Cisco Cloudlock
  D. Cisco Umbrella Investigate
  C. Cisco Cloudlock

  ---

  Explanation

• Question 493:

  Refer to the exhibit.

  

  A network administrator configured a site-to-site VPN tunnel between two Cisco IOS routers, and hosts are unable to communicate between two sites of VPN. The network administrator runs the debug crypto isakmp sa command to track VPN status. What is the problem according to this command output?

  A. hashing algorithm mismatch
  B. encryption algorithm mismatch
  C. authentication key mismatch
  D. interesting traffic was not applied
  C. authentication key mismatch

  ---

  Explanation

• Question 494:

  An organization wants to improve its cybersecurity processes and to add intelligence to its data The organization wants to utilize the most current intelligence data for URL filtering, reputations, and vulnerability information that can be integrated with the Cisco FTD and Cisco WSA What must be done to accomplish these objectives?

  A. Create a Cisco pxGrid connection to NIST to import this information into the security products for policy use
  B. Create an automated download of the Internet Storm Center intelligence feed into the Cisco FTD and Cisco WSA databases to tie to the dynamic access control policies.
  C. Download the threat intelligence feed from the IETF and import it into the Cisco FTD and Cisco WSA databases
  D. Configure the integrations with Talos Intelligence to take advantage of the threat intelligence that it provides.
  D. Configure the integrations with Talos Intelligence to take advantage of the threat intelligence that it provides.

  ---

  Explanation

• Question 495:

  Refer to the exhibit.

  

  What is the result of this Python script of the Cisco DNA Center API?

  A. adds authentication to a switch
  B. adds a switch to Cisco DNA Center
  C. receives information about a switch
  D. deletes a switch from Cisco DNA Center
  B. adds a switch to Cisco DNA Center

  ---

  Explanation

• Question 496:

  An engineer must deploy a Cisco Secure Web Appliance. Antimalware scanning must use the Outbreak Heuristics antimalware category on files identified as malware before performing any other processes. What must be configured on the Secure Web Appliance to meet the requirements?

  A. Sophos scanning engine
  B. Webroot scanning engine
  C. McAfee scanning engine
  D. Adaptive Scanning
  D. Adaptive Scanning

  ---

  Explanation

• Question 497:

  An engineer must prevent communication with a cloud application being decrypted. The application database uses AES-256 with SHA-512 and web access to the application uses HTTPS with SSLv2 self-signed certificates. What must the engineer implement next?

  A. SSLV3 with self-signed certificates
  B. TLS 1.3 with signed certificates
  C. SSLv3 with signed certificates
  D. TLS 1.3 with self-signed certificates
  B. TLS 1.3 with signed certificates

  ---

  Explanation

• Question 498:

  An email administrator is setting up a new Cisco ESA. The administrator wants to enable the blocking of greymail for the end user. Which feature must the administrator enable first?

  A. File Analysis
  B. IP Reputation Filtering
  C. Intelligent Multi-Scan
  D. Anti-Virus Filtering
  C. Intelligent Multi-Scan

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01100.html#con_1192436

• Question 499:

  Where are individual sites specified to be blacklisted in Cisco Umbrella?

  A. application settings
  B. content categories
  C. security settings
  D. destination lists
  D. destination lists

  ---

  Explanation

  https://docs.umbrella.com/deployment-umbrella/docs/working-with-destination- lists

• Question 500:

  Client workstations are experiencing extremely poor response time. An engineer suspects that an attacker is eavesdropping and making independent connections while relaying messages between victims to make them think they are talking to each other over a private connection. Which feature must be enabled and configured to provide relief from this type of attack?

  A. Link Aggregation
  B. Reverse ARP
  C. private VLANs
  D. Dynamic ARP Inspection
  D. Dynamic ARP Inspection

  ---

  Explanation